(Xojo Plugin) Sign String to create a CAdES-T Signature, using HTTP Proxy to Access Timestamp Server

This example will sign a string to create a CAdEST-T signature. It will use an HTTP proxy to access the timestamp server.

Chilkat Xojo Plugin Download Xojo Plugin for Windows, Linux, Mac OS X, and ARM, ARM64

Dim crypt As New Chilkat.Crypt2

Dim cert As New Chilkat.Cert
cert.SmartCardPin = "123456"
Dim success As Boolean
success = cert.LoadFromSmartcard("")
If (success <> True) Then
    System.DebugLog(cert.LastErrorText)
    Return
End If

success = crypt.SetSigningCert(cert)

// Use SHA-256 rather than the default of SHA-1
crypt.HashAlgorithm = "sha256"

// Create JSON that tells Chilkat what signing attributes to include:
Dim attrs As New Chilkat.JsonObject
success = attrs.UpdateBool("contentType",True)
success = attrs.UpdateBool("signingTime",True)
success = attrs.UpdateBool("messageDigest",True)
success = attrs.UpdateBool("signingCertificateV2",True)

// A CAdES-T signature is one that includes a timestampToken created by an online TSA (time stamping authority).
// We must include the TSA's URL, as well as a few options to indicate what is desired.
// Except for the TSA URL, the options shown here are typically what you would need.
success = attrs.UpdateBool("timestampToken.enabled",True)
success = attrs.UpdateString("timestampToken.tsaUrl","https://freetsa.org/tsr")
success = attrs.UpdateBool("timestampToken.addNonce",False)
success = attrs.UpdateBool("timestampToken.requestTsaCert",True)
success = attrs.UpdateString("timestampToken.hashAlg","sha256")

crypt.SigningAttributes = attrs.Emit()

Dim strToSign As String
strToSign = "Hello World!"

Dim bd As New Chilkat.BinData
success = bd.AppendString(strToSign,"utf-8")

// -------------------------------------------------------------------------
// The purpose of this example is to show how an HTTP object with custom
// settings can be used to access the Internet when signing.
// Access to the Internet is needed to communicate with the timestamp server.
Dim http As New Chilkat.Http
// This can be a domain name, hostname, or IP address.
http.ProxyDomain = "172.16.16.56"
http.ProxyPort = 808
http.ProxyLogin = "myProxyLogin"
http.ProxyPassword = "myProxyPassword"
crypt.SetTsaHttpObj http
// -------------------------------------------------------------------------

// This creates the CAdES-T signature.  During the signature creation, it
// communicates with the TSA to get a timestampToken.
// The contents of bd are signed and replaced with the CAdES-T signature (which embeds the original content).
success = crypt.OpaqueSignBd(bd)
If (success <> True) Then
    System.DebugLog(crypt.LastErrorText)
    Return
End If

// Get the signature in base64 format:
System.DebugLog(bd.GetEncoded("base64_mime"))

System.DebugLog("Success.")